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FOREWORD 

This  report  represents  one  part  of  the  research  results 
sponsored  by  the  Air  Force  Materials  Laboratory  under  contract 
No.  F33615-  75-C-5112  to  Virginia  Polytechnic  Institute  and 
State  University,  Department  of  Engineering  Science  and  Me- 
chanics. The  research  was  performed  by  Dr.  J.  N.  Yang.  The 
final  preparation  of  the  report  was  conducted  during  the  period 
September  1 to  November  15,  1976,  at  The  George  Washington 
^Tniversity,  Department  of  Civil,  Mechanical  and  Environmental 
Engineering  with  which  Dr.  J.  N.  Yang  is  presently  associated. 
The  project  engineer  for  the  Air  Force  Materials  Laboratory  is 
Dr.  S.  W.  Tsai,  Chief,  Mechanics  and  Surface  Interaction  iranch. 
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SECTION  I 

1 INTRODUCTION 

r Unlike  metallic  aircraft  structures  where  NDI  techniques  for 

crack  detection  and  maintenance  procedures  for  fracture  control 
have  been  well  developed,  the  technique  of  fatigue  damage  detec- 
tion for  composites  is  still  in  a primitive  stage.  As  a result, 
it  has  been  advocated  [1-3]  that  proof  testing  may  be  a very 
promising  approach  for  the  safety  control  and  certification  of 
composite  structures,  in  particular,  when  critical  locations  of 
the  structure  are  not  inspectable.  The  purpose  of  performing 
periodic  proof  tests  is  to  eliminate  weak  components  whose  resid- 
ual strength  has  progressively  degraded  under  service  loads,  thus 
ensuring  an  acceptable  level  of  composite  reliability  in  service. 
The  theory  of  single  proof  testing  and  optimization  have  been 
developed  for  metallic  materials,  particularly  for  application  to 
pressure  vessel  design  [e.g.,  4-8].  The  fatigue  reliability 
' analysis  for  composites  under  periodic  proof  tests,  however,  has 

not  been  available  to  date. 

It  is  the  purpose  of  this  paper  to  (i)  present  a fatigue 
• reliability  analysis  methodology  for  composites  subjected  to 

periodic  proof  tests  in  service,  in  particular,  the  improvement 
of  composite  reliability  in  service  resulting  from  the  applica- 
tion of  period  proof  tests,  and  (ii)  establish  an  optimum 
periodic  proof  test,  based  on  the  cost  and  reliability  criteria. 

The  present  analysis  enables  one  to  determine  the  optimal  proof 
i load  level  and  the  optimal  number  of  periodic  proof  tests  such 

that  the  total  expected  cost  is  minimized,  while  an  acceptable 
level  of  composite  reliability  is  satisfied.  The  present  effort  is 
relevant  to  the  establishment  of  rational  design  criteria,  cost 
and  risk  minimization,  as  well  as  maintenance  procedures  and 
certification  plans  for  composites  in  application  to  aircraft 
structures. 

Fatigue  has  been  a problem  in  the  design  of  aircraft  struc- 
tures. This  problem  is  further  complicated  by  the  statistical 
(random)  nature  of  most  loading  inputs  to  aircraft  structures  as 
well  as  the  statistical  nature  of  the  strength  of  composites. 

As  a result,  the  probabilistic  approach  becomes  an  important 
tool  for  a rational  analysis  and  design  of  composite  structures. 

Fatigue  damage  in  composites  may  be  revealed  by  the  degrada- 
tion of  residual  strength  [1,10-14].  However,  the  determination 
of  the  residual  strength,  nondestructively,  may  not  be  feasible 
in  practice  [13-14].  Therefore,  proof  testing  becomes  a viable 
and  promising  method  for  eliminating  weak  components  when  their 
residual  strengths  have  fallen  below  the  allowable  safety  level 
and  thus  increasing  the  reliability  and  safety  of  composite 
structures. 
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The  ultimate  strength  of  composites  has  been  shown  to  follow 
a two-parameter  Wei  bull  distribution  reasonably  well,  and  it  is 
used  in  the  present  analysis.  The  parameters  associated  with  the 
Weibull  distribution  are  determined  from  the  results  of  laboratory 
tests.  A residual  strength  degradation  model  [1,9]  has  been 
employed  herein  to  describe  the  strength  degradation  of  composites 
under  service  loads.  The  analysis,  however,  can  incorporate  any 
model  of  strength  degradation.  The  parameters  associated  with  the 
residual  strength  model  are  determined  from  the  results  of  labora- 
tory tests  under  flight-by-flight  random  service  load  spectra 
[1,10-12]. 

For  transport-type  aircraft,  such  as  bombers,  tankers,  etc., 
failure  may  occur  when  the  residual  strength  is  exceeded  by  gust 
loads.  The  gust  loads  are  considered  herein  as  stationary  com- 
posite Gaussian  random  processes  as  discussed  in  Refs.  15-21. 

For  fighter  aircraft,  failure  may  occur  when  the  residual  strength 
is  exceeded  by  maneuver  loads.  The  maneuver  loads  are  approxi- 
mated by  a finite  number  of  Gaussian  random  processes  with  differ- 
ent intensities  (standard  deviations)  and  durations  as  modeled  by 
Press  [21-22].  The  failure  mode  discussed  herein  is  referred  to 
as  the  first-passage  or  first-excursion  failure  in  random  vibra- 
tion [23-24].  Hence,  as  the  service  time  increases,  the  residual 
strength  decreases  progressively  due  to  fatigue  damage  and  thus 
increasing  the  failure  rate  with  time  [19]. 

Proof  testing  is  performed  at  periodic  intervals  [see  Fig.  1], 
and  only  those  components  that  survive  the  proof  test  are  used  in 
service.  As  a result,  after  each  proof  test  the  statistical  dis- 
tribution of  the  residual  strength,  including  the  ultimate  strength 
prior  to  service,  of  the  surviving  components  changes  and  is  trun- 
cated at  the  proof  load  level.  Such  a truncation  effect  eliminates 
the  lower  tail  of  the  distribution  function  (or  density  function) 
up  to  the  proof  load  level  and  thus  increases  the  reliability  of 
components.  The  composite  may,  however,  be  damaged  during  each 
proof  testing  depending  on  the  proof  load  level.  A possible  damage 
model  is  suggested  and  is  incorporated  in  the  present  analysis. 
Consequently,  the  statistical  distribution  of  the  residual  strength 
not  only  changes  with  time  due  to  the  accumulation  of  fatigue 
damage  (strength  degradation)  but  also  changes  after  each  proof 
testing  due  to  the  truncation  and  possible  damaging  effect. 

When  a component  fails  under  the  proof  test,  a new  component 
is  manufactured  and  proof-tested  for  replacement.  If  the  new 
component  fails  also  under  proof  testing,  then  another  component 
is  further  manufactured  and  proof-tested  again  until  a new  arti- 
cle which  survives  proof  testing  is  obtained.  Thus,  the  strength 
of  the  component  is  renewed  after  replacement.  Such  a renewal 
process  is  taken  into  account  in  the  present  analysis. 
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Taking  into  account  the  random  variables  (static  strength  and 
residual  strength),  random  service  loads  (gust  and  maneuver  loads), 
strength  truncations  due  to  proof  tests,  strength  degradations  due 
to  service  loads,  and  the  renewal  processes  due  to  replacements, 
the  solution  for  the  probability  of  composite  failure  in  service 
is  derived. 

Finally,  a formulation  for  the  optimal  periodic  proof  test 
is  established.  The  optimal  proof  load  level  and  the  optimal 
number  of  periodic  proof  tests  are  obtained  by  minimizing  an  ob- 
jective function,  which  is  the  total  expected  (statistical 
average)  cost,  while  the  constraint  on  allowable  level  of  com- 
posite reliability  in  service  is  satisfied.  The  total  expected 
cost  consists  of  the  expected  cost  of  proof  tests,  the  expected 
cost  of  components  destroyed  by  proof  tests,  and  the  expected 
cost  of  failure  in  service. 

The  experimental  verifications  for  the  residual 
strength  degradation  model  and  the  theory  of  periodic 
proof  tests  discussed  in  this  report  are  presented  in 
Ref.  28. 


3 


SECTION  II 


STATISTICAL  DISTRIBUTION  OF  RESIDUAL  STRENGTH  UNDER  SERVICE 
LOADS  AND  PERIODIC  PROOF  TESTS 


Let  R„  be  the  ultimate  strength  (or  stress)  of  composites  prior 
to  serviceuand  proof  testing.  It  has  been  shown  that  the  statisti- 
cal distribution  of  Rn  follows  the  two-parameter  Weibull  distribu- 
tion reasonably  well  u [1-2], 


FRq(x)  = P[Rq  < x]  = 1 - exp  t(x/B)a]  (1) 


in  which  FD  (x)  is  the  distribution  function  of  Rn  indicating  the 

K0  u 
probability  that  R„  is  smaller  than  or  equal  to  an  arbitrary  value 

x.  In  Eq.  1,  a andUB  are,  respectively,  the  shape  parameter  and  the 

scale  parameter  (or  characteristic  ultimate  strength).  Both  a and  6 

are  determined  from  experimental  data.  A catalog  of  a and  B values 

for  various  composite  laminates  has  been  compiled  in  Reference  1. 

Prior  to  service,  the  composite  is  subjected  to  proof  testing 
referred  to  as  the  initial  (or  first)  proof  test.  Let  R(0)  be 
the  strength  of  components  that  survive  the  initial  proof  test  at  a 
proof  load  level,  r„.  Then,  the  distribution  function  of  R(0)  can 
be  obtained  from  u that  of  Rn  given  by  Eq.  1 by  a truncation  as 
follows; 


fr(0)(x)  = P[R(0)  1 x]  = 1 - P[R(0)  > x]  = 1 - P[Rq  > x|RQ  > rQ] 


t 


After  the  component  is  put  into  service,  the  strength  decreases 
progressively  due  to  fatigue  damage  under  service  loads. 

Assuming  that  the  slope  of  the  residual  strength  of  composites 
is  inversely  proportional  to  some  power  c-1  of  the  residual  strength 
itself,  one  can  write  [3,28[] 
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(3) 


dR(t) 

dt 


A 

Rc1(t) 


in  which  t is  the  number  of  flights  (or  flight  hours),  R(t)  is  the 
residual  strength  of  composites  at  t,  c is  believed  to  be  a material 
constant,  and  A is  a function  of  material  properties  and  service 
load  characteristics. 

Integrating  Eq.  3 from  tp  to  t,  one  obtains  for  c^l. 


RC(t)  = Rc(t0)  - *(t-tQ)  (4) 

in  which  4>=cA  is  a complicated  function  of  both  the  material  proper- 
ties and  service  load  characteristics.  Both  c and  <t>  have  to  be 
determined  from  experimental  results  under  flight-by-flight  service 
loading  spectra  [e.g.,  1,10-12] 

Eq.  4 is  similar  to  the  residual  strength  model  proposed  by 
Halpin  and  Waddoups  for  composite  materials  [9,1,10-12],  except  that 
it  was  derived  on  the  assumption  of  crack  prooaaation.  Experimental 
verifications  for  such  a model  is  presented  in  Ref.  28. 


It  is  emphasized  that  a particular  residual  strength  model, 
such  as  Eq.  4,  is  not  essential  to  the  present  development  of  the 
reliability  analysis  methodology,  since  other  models  of  residual 
strength  can  be  similarly  accounted  for. 

It  should  be  noticed  that  f is  a function  of  material  proper- 
ties and  service  loads, such  as  ground  loads,  ground-air-ground 
loads,  gust  loads  and  maneuver  loads.  Since  most  of  the  service 
load  input  involves  statistical  variability,  $ is  theoretically  a 
random  variable.  It  follows  then  from  Eq.  4 that  associated  with 
a sample  value  x of  R(0)  there  is  no  one-to-one  corresponding 
sample  value  y of  R(t)  since  $ is  a random  variable,  and  hence 
the  strength  degradation  follows  a random  path.  It  is  mentioned, 
however,  that  the  assumption  that  4>  is  deterministic,  is  a good 
approximation  if  the  statistical  dispersion  of  4>  is  small  or 
negligible  (a  deterministic  constant  has  zero  statistical  disper- 
sion). It  has  been  shown  in  Ref.  25  that  the  statistical  disper- 
sion (coefficient  of  variation)  of  $ indeed  diminishes  as  0(l//n) 
where  n is  the  number  of  load  cycles.  Since  for  practical  appli- 
cations, the  number  of  load  cycles  within  the  service  life  is 
extremely  large,  it  may  be  reasonable  to  neglect  the  effect  of 
the  statistical  dispersion  of  <j>.  The  assumption  that  $ is  a 
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deterministic  constant  has  been  used  in  Refs.  1,10-12  for  the  analy- 
sis of  test  data.  Recent  investigations  also  indicate  [3]  that  such  an 
assumption  may  be  reasonable.  Although  the  statistical  dispersion 
of  $ is  neglected  in  the  present  analysis  for  the  sake  of  simplicity 
in  mathematical  presentation,  the  present  analysis  can  account  for 
the  situation  where  $ is  a random  variable. 

Supposing  that  proof  testing  is  performed  at  periodic  intervals 
of  T flights,  see  Fig.  1,  the  distribution  function  of  the  residual 
strength  changes  with  time  because  of  the  strength  degradation  in 
service  and  because  of  the  effect  of  proof  tests.  A detailed  deriva- 
tion for  the  change  of  the  strength  distribution  is  given  in  Appendix 
I and  is  schematically  displayed  in  Fig.  2.  The  probability  density 
function,  f„,.T.(x),  of  the  residual  strength,  R(jT)»of  the  component 
having  survived  up  to  the  j+lth  proof  test  is  derived  in 

Appendix  I;  with  the  result 


Mjnw  ■ t r c^) 


f/roc  + »JT\“/C 

/xC  + $jT  \/C  ) 

V ) 

V 6C  / ) 

j = 0,  1,  2,  ... 


Eq.  5 is  derived  under  the  condition  that  the  proof  load  level, 
rg,  does  not  damage  the  composice.  Experimental  data  [1-3,26-27] 
indicate  that  the  damage  resulting  from  proof  testing  may  be  neg- 
lected if  the  proof  load  level  rn,  is  below  90%  of  the  characteris- 
tic strength  for  -tt/4  glass/epoxyuand  other  laminates. 


As  the  proof  load  level  increases,  the  proof  test  itself  will 
damage  the  composite.  A damage  model  under  the  proof  test  is  pre- 
sented in  Appendix  II  and  the  probability  density  function  fR,_Tv(x) 
is  derived  in  Eq.  1 1 -5 . Note  that  Eq.  1 1 -5  degenerates  into  u 
Eq.  5 when  no  damage  occurs  under  the  proof  test,  i.e.,  D-j=l,  D?=l 
Lsee  Appendix  III]. 


Other  quantities  of  importance  in  the  reliability  assessment 
are  the  probability  that  the  component  will  be  destroyed  under  each 
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proof  test  as  well  as  the  probability  of  surviving  each  proof.  Let 
the  components,  which  pass  the  initial  (or  the  first)  proof  test 
and  are  put  into  service,  be  referred  to  as  the  original  components. 
Let  B.:*be  the  probability  that  an  original  component  will  survive 
j+1  proof  tests,  i.e.,  the  original  component  will  survive  up  to  jT 
flights  [see  Fig.  1],  Furthermore,  let  B.  be  the  probability  that 
an  original  component  will  fail  (or  be  ^destroyed)  during  the  j+lth 
proof  test.  Since  the  probability  of  being  destroyed  during  the 
j+lth  proof  test  is  the  difference  between  the  probabi 1 it$surviving 
j+1  proof  tests  and  the  probability  of  surviving  j proof  tests,  it  is 
obvious  that 

vvi  -b3  ; (6> 

★ 

in  which  BQ  = 1.0. 

The  probability  of  surviving  up  to  the  j+lth  proof  test  per- 
formed at  jT  for  an  original  component  has  been  derived  in  the 
Appendix  I;  with  the  result 


When  the  damage  occurs  during  each  proof  test,  B*  has  been  de- 
rived in  Eq.  1 1 -6  of  Appendix  II.  Note  that  Eq.  1 1 -6  degenerates 
into  Eq.  7 when  no  damage  occurs  under  proof  tests,  i.e.,  D,=l, 

D2=l  [see  Appendix  III]. 

Under  the  renewal  policy,  a new  component  is  manufactured  and 
proof-tested  to  replace  the  one  destroyed  by  the  proof  test. 

The  new  component  may  fail  under  the  proof  test,  in  which  case 
another  new  component  is  further  manufactured  and  proof- 

tested  until  a new  article  that  survives  is  obtained.  The  component 
for  replacement  is  referred  to  as  the  renewal  component  in  order  to 
differentiate  it  from  the  original  component  . As  a result,  the 
strength  of  the  structural  component  is  renewed  after  replacement. 
Such  a renewal  process  must  be  taken  into  account.  Under  the  re- 
newal policy,  B.  derived  in  Eq.  6 represents  the  percentage  of 
replacement  at  J jT  flights  (or  j+lth  proof  test). 
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SECTION  III 


SERVICE  LOADS  AND  FAILURE  RATE 


As  mentioned  previously,  failure  of  components  occurs  as  soon 
as  the  residual  strength  of  composites  is  exceeded  by  the  service 
loads.  Hence,  the  exceedance  characteristics  of  service  loads  are 
essential  to  the  assessment  of  composite  reliability.  For  transport- 
type  aircraft,  the  critical  load  which  may  exceed  the  residual 
strength  level  is  essentially  the  gust  load.  For  fighter  aircraft, 
however,  the  exceedance  of  the  residual  strength  may  be  due  to 
maneuver  loads.  Since  both  gust  loads  and  maneuver  loads  have 
different  statistical  characteristics,  they  are  discussed  separately 
in  the  following; 

(1)  Gust  Loads:  The  gust  turbulence  has  been  modeled  as  a 

composite  Gaussian  random  process  [15,17-21].  The  expected  (average) 
number  of  upcrossings  of  a load  (or  stress)  level,  x,  by  the  gust 
load  per  flight  (or  flight  hour)  can  be  expressed  as 


ule 


-(x-x  )/a  '■ 

+ u2e 


(8) 


in  which  N*  is  the  total  number  of  gust  load  cycles  per  flight  (or 
flight  hour),  and  u]  and  U2  represent  the  fractions  of  clear  air 
turbulence  and  thunderstorm  turbulence,  respectively,  with  associ- 
ated intensities  cm  and  a;>.  Parameters  u-|,  U2>  o]  and  are  re~ 
ferred  to  as  turbulence  field  parameters  and  are  specified  in 
Reference  15  for  various  altitudes.  Xq  appearing  in  Eq.  8 is  the 
mean  stress  (or  load)  due  to  one  g loading.  The  graphical  represen- 
tation of  Eq.  8 is  referred  to  as  the  exceedance  curve,  which  is 
established  from  measured  turbulence  data  [e.g.,  Reference  16], 

In  practice,  the  residual  strength  level  is  much  higher  com- 
pared to  the  intensities  of  oi  and  02  and  hence  it  is  reasonable 
to  assume  that  the  crossings  (or  excursions)  of  the  residual 
strength  level  by  the  gust  load  are  statistically  independent  [19]. 
This  is  referred  to  as  the  Poisson  approximation  in  random  vibra- 
tion and  will  be  used  herein. 

Let  R(t ) be  the  residual  strength  at  the  xth  flight,  then  the 
expected  number  of  upcrossings  over  the  residual  strength  at  the 
xth  flight  by  the  gust  load,  denoted  by  h(x),  follows  from  Eq.  8 as 
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-[R(T)-xQ]/ai 


(9) 


h(T)  = F*[R(t)] 


2 

N*  £ u.e 
i = l 1 


Because  of  the  assumption  of  independent  crossings,  h(-r)  is  referred 
to  as  the  failure  rate  or  the  risk  function. 

(2)  Maneuver  Loads:  The  exceedance  curves  for  maneuver  loads 

depend  on  the  mission  operational  characteristics  of  fighter  air- 
craft. The  exceedance  curves  are  obtained  from  the  statistical 
analysis  of  measured  data  [22,15].  A typical  maneuver  exceedance 
curve  is  given  in  Fig.  3 for  F-lll  fighters  [22].  According  to  the 
method  of  Press  [10,21],  the  exceedance  curve  can  be  approximated  by 
the  summation  of  a finite  number  of  straight  lines  in  a log 

F$(x)  vs.  (x-Xq)  plot  (see  Fig.  3).  Therefore  the  exceedance  curve 
F*(x)  can  be  expressed  analytically  as  follows; 


★ , , * 

Fs(x)  = N 


m -(x-xQ)2/2o. 
£ u.e 
i=l  1 


(10) 


in  wh  ich  m is  the  number  of  straight  1 ins  depending  on  the  accuracy 
required  for  approximation,  and  u-j  and  o-j  are  measured  directly  from 
the  straight  lines  [see  Reference  21  for  detailed  discussion].  Eq. 

10  implies  that  the  maneuver  load  is  decomposed  into  m segments  of 
Gaussian  random  processes  with  intensities  o] , oo,  • • • , om  and  dura- 
tions N*ui,  N*U2,  •••,  N*um,  since  each  term  in  Eq.  10  is  a stationary 
Gaussian  exceedance  curve.  This  type  of  approximation  will  be  used 
herein  expediently  for  the  assessment  of  composite  reliability. 

As  a result,  the  failure  rate,  h(x),  at  the  xth  flight  for  a 
fighter  aircraft  follows  from  Eq.  10  as 


h(x)  = N* 


m 

£ 

i=l 


-[R(i)-x0]2/2ai2 


(ID 


in  which  the  assumption  of  independent  crossings  over  the  residual 
strength  by  the  maneuver  load  has  been  made. 
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Considerable  amount  of  data  on  fighter  maneuver  loads  indicates 
that  unlike  the  gust  load,  the  maneuver  exceedance  curve  is  not  sym- 
metric. This  is  an  indication  that  the  maneuver  load  is  not  a 
Gaussian  random  process,  and  further  investigation  for  the  statisti- 
cal model  of  maneuver  loads  is  needed  [19],  For  the  reliability 
analysis,  however,  the  approximation  of  the  positive  exceedance 
curve  by  the  method  of  Press  [21 ],  as  discussed  previously,  seems 
to  be  acceptable  as  a first  order  approximation.  Note  that  the 
negative  exceedance  curve  is  disregarded,  since  it  is  usually  much 
smaller  than  the  positive  exceedance  curve.  The  advantage  of  such 
an  approximation  [18]  discussed  previously  lies  on  its  mathematical 
simplicity,  which  is  essential  for  practical  implementation. 


SECTION  : V 


PROBABILITY  OF  FAILURE  UNDER  PERIODIC  PROOF  TESTS  IN  SERVICE 


Proof  testing  is  performed  at  periodic  intervals  of  T flights, 
see  Fig.  1.  The  probability  of  failure  within  each  service  interval 
will  be  computed  first  and  then  the  probability  of  failure  will  be 
evaluated  as  a function  of  service  time.  In  what  follows,  the  fail- 
ure rate  of  Eq.  9 (transport-type  aircraft)  will  be  used  for  simpli- 
city in  derivation  and  the  results  associated  with  the  failure  rate 
of  Eq.  11  (fighters)  will  be  given  later. 

The  following  formula  for  the  conditional  probability  will  be 
used  frequently. 


P[A | X = x]f^(x)dx 


(12) 


in  which  P[A]  is  the  probability  of  failure.  P[A|X  = x]  is  the 
probability  of  failure  given  (or  under  the  condition  that)  the 
random  variable  X is  equal  to  a value  x,  and  f„(x)  is  the  proba- 
bility density  of  X.  Furthermore,  if  the  totat  failure  rate  in 
one  service  interval  is  H,  then  the  probability  of  failure  Pf  in 
that  service  interval  is  ' 


Pf  = 1 - exp(-H)  (13) 


(1)  Probability  of  Failure,  p, , in  the  First  Service  Interval 
(0,T)  1 

The  residual  strength  R(t)  at  the  -rth  flight  in  (0,T), 
follows  from  Eq.  4 as 


RC(t)  = Rc(0)  - <Dt  (14) 


Substitution  of  Eq.  14  into  Eq.  9 yields  the  failure  rate  at  t 
within  the  1st  service  interval  (0,T) 
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,1/C 


* 2 -{[R  (0)  - *t]  ' - xQ}/oi 

h(x)  = N z u.e 
i=l  1 


(14b) 


Since  R(0)  is  a random  variable  with  a statistical  distribution 
function  given  by  Eq.  2,  Eq.  14b  can  formally  be  written  as  a condi- 
tional failure  rate. 


* 2 -[(xc-4>t)1/c  - xj/a. 

h[x | R ( 0 ) = x]  = N 2^  uie 


(15) 


where  the  condition  is  that  R(0)  = x. 

The  total  conditional  failure  rate  within  (0,T)  is. 


H-|  [R ( 0 ) = x]  = 


f h[r 


| R (0)  = x]  dx 


= N Z u. 


i=l 


/ 


■T  -[(xc-$t)1/c  - X ]/oi 
e dx 


(16) 


The  conditional  probability  of  failure  within  (0,  T),  under  the 
condition  that  R(0)  = xsfollows  from  Eq.  13  as  1 - exp  {-H-|[R(0)  = x]} 


The  unconditional  probability  of  failure,  P] , within  the  first 
service  interval  (0,T)  is  obtained  by  the  application  of  Eq.  12, 


■/ 


fR(0)^x) 


-H,[R(0)  = x]‘ 
1 - e 1 


dx 


(17) 


in  which  H,[R(0)  = x]  is  given  by  Eq.  16  and  fR/nJx)  is  the  probability 


in  which  = xj  is  given  Dy  tq.  io  unu  1 d ( q) v ' ,b.L,,c 

density  function  of  R(0)  given  by  Eq.  5 with  j=0. 
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(2)  Probability  of  Failure,  p~,  in  the  second  service  interval 

(T.2T) 

The  probability  of  failure,  Pp,  in  the  second  service 
interval  (T,2T)  is  attributed  to  two  different  populations;  (i) 
the  original  component  that  survives  the  2nd  proof  test  at  T, 

(ii)  the  renewal  component  manufactured  at  T because  of  the 
failure  of  the  original  component  under  the  proof  test  at  T, 


in  which  Vp  is  the  probability  of  failure  in  the  second  service 
interval  c (T,2T)  for  the  original  component  that  survives  the 
2nd  proof  test  at  T with  the  surviving  probability  B*.  Hence, 
B*V2  is  the  contribution  of  failure  probability  in  (T,2T)  from 
the  original  component. 

The  second  term  B-|p-|  is  contributed  by  the  renewal  component 
manufactured  at  T,  where  B-,  is  the  probability  that  the  original 
component  will  be  destroyed  under  the  2nd  proof  test  at  T.  The 
probability  of  failure  of  the  renewal  component  in  (T,2T)  is  P] 
given  by  Eq.  17,  which  is  referred  to  as  the  renewal  failure 
probability.  Both  Bf  and  B]  have  been  derived  in  Eqs.  6 and  7. 
Note  that  B*+B-|  = l .0. 

To  evaluate  Vp,  it  is  necessary  to  estimate  the  residual 
strength  and  failure  rate  in  (T,2T)  for  the  original  component  as 
follows; 

The  residual  strength  R(T+x)  at  T+t  flights  can  be  expressed 
in  term  of  R(T)  through  Eq.  1, 


Rc (T+t ) = RC(T)  - 


The  failure  rate  at  T+x  flights  is  obtained  by  substituting 
Eq.  19  into  Eq.  9.  Then,  the  conditional  failure  rate  can  be 
shown  as 


* 2 

h[T+x|R(T)  = x]  = N Z u.e 

i _ 1 


[(xC-$x)1/C-x0]/ai 


The  total  conditional  failure  rate  H„[R(T)  = x]  in  (T,2T)  given 
R(T)  = x is  obtained  by  integrating  Eq.  20  with  respect  to  x;  with 
the  result. 
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H9[R(T)  = x]  = N L u. 


fT  -[(XC-4>t)1/C  - xQ]/ai 
e dt 


Note  that  Eqs.  16  and  21  are  identical,  i.e.,  H2[R(T)  = x]  = H,[R(0)  =x], 
as  expected. 

The  unconditional  failure  probability,  V^,  for  the  original  com- 
ponent, is  obtained  from  Eq.  21  by  the  application  of  Eqs.  12-13  as 
follows, 


r r -h2[r(d  = x]i 
J fR(T)^  L1  ' e J 


in  which  H2[R(T)=x]  is  given  by  Eq.  21  and  f„,,Jx)  is  the  probability 
density  function  of  R(T)  given  by  Eq.  5 'with  j=l. 

(3)  Probability  of  Failure  in  the  3rd  Service  Interval  (2T,3T) 

The  probability  of  failure  in  (2T,3T),  denoted  by  p^,  is 
attributed  to  three  parts; 


P3  ^2^3  + ^1^2  + ^2^1 


in  which  V,  is  the  probability  of  failure  in  (2T,3T)  for  the  original 
component  that  survives  all  of  the  previous  proof  tests,  and  B^,  B] , 
B2,  p-|  and  p2  have  been  given  previously. 

Eq.  23  is  sel f-explanatory.  The  first  term  B^V^  is  the  contri- 
bution from  the  original  component,  where  B^  is  the  proba- 

bility of  surviving  all  previous  proof  tests^  up  to  2T  (Eq.  6). 

The  second  term  B-^  is  the  contribution  from  the  renewal  component 
manufactured  at  T,  where  the  renewal  probability  is  Bi,and  the 
renewal  failure  probability  in  (2T,3T)  for  the  renewal  component 
is  P2-  The  third  term  B2P i represents  the  contribution  from  the 
renewal  component  manufactured  at  2T  to  replace  the  original  com- 
ponent that  fails  under  the  3rd  proof  test  performed  at  2T.  The 
probability  of  such  a replacement  is  B2  and  the  renewal  failure 
probability  in  (2T,3T)  is  P] . It  is  important  to  notice  that 
B^+B-j  +62=  1.0. 
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V3  appearing  in  Eq.  23  can  be  evaluated  by  first  expressing 
the  residual  strength,  R(2T+x),  of  the  original  component  in 
terms  of  R(2T),  i.e.,  Rc(2T+i)  = RC(2T)-$t  and  by  substituting 
it  into  Eq.  9 to  obtain  the  failure  rate  and  the  conditional 
failure  rate.  Then,  with  the  application  of  Eq.  12-13  in  a 
manner  similar  to  the  derivation  for  V2,  it  can  be  shown  that 


V 


3 


-H?[R(2T)  = x]' 
e dx 


(24) 


in  which  fn/oT\(x)  is  the  probability  density  of  R(2T)  given  by 
Eq.  5 withKUi;j=2,  and  H3[R(2T)=x]  = H2[R(T)=x]  = H1[R(0)=x]. 

(4)  General  Solution 

Let  p.  be  the  probability  of  failure  in  the  jth  service 
interval  [ ( j - 1JT , j T] . Then,  in  a manner  similar  to  the  derivation 
for  p, , p2  and  p3,  one  can  derive  the  general  recurrence  solution 
p.  as  follows; 

J 

pj " + sj-i  B*po-*  (25) 

in  which 

fR[(j-l)T](x)  f1  ' e H(X)]  dx  (26> 


H(x)  = N 


Z u . 
i = l 1 


-[(xc-$T)^C-xn]/a. 
e 1 dx 


(27) 


* * 
in  which  Bq=  1 , 6^1  = 1 for  j - 1 > 0 and  6 ^ 3 =0  for  j 0.  B.  and  are 

given  by  Eqs.  6 and  7,  and  fR(jT)(x)  is  given  by  Eq.  5.  Note  that 

Eq.  27  can  be  integrated  analytically  when  c is  an  integer. 
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It  should  be  mentioned  that  the  solutions  given  above  are  for 
the  transport-type  aircraft  where  the  exceedance  of  the  residual 
strength  is  due  to  gust  turbulence.  For  fighter  aircraft  where 
the  exceedance  is  due  to  maneuver  loads,  the  solutions  given  by 
Eq.  25-27  still  hold  except  that  H(x)  should  be  changed  as 
follows; 


H(x)  = N* 


m 

z 

i=l 


-[(Xc-$r)1/c  - X0]2/2o2 

e 


dT 


(28) 


0 


which  is  obtained  by  the  application  of  Eq.  11. 


(5)  Cumulative  Probability  of  Failure  and  Reliability 

Thus  far,  the  probability  of  failure  in  each  service 
interval,  i.e.,  p.  for  j=l,2,-**,  has  been  derived.  The  proba- 
bility of  survival1  in  each  service  interval  is  therefore  1-p. 
for  j = T , 2 , * • • . Let  rj  be  the  probability  of  survival  J 

(called  reliability)  Jin  j service  intervals  (0,jT).  Then  the 
survival  in  j service  intervals  (0,jT)  implies  the  survival  in 
all  intervals  up  to  jT,  i.e., 

r.  = 1 (1  - P,)  (29) 

J i=i  1 

The  probability  of  failure  in  j service  intervals  (0,jT),  denoted 
by  pf(r0,j),  is 

Pf(rn,j)  = 1 - r = 1 - it  (1-p.)  (30) 

r u j i=|  1 


Supposing  that  the  composite  is  subjected  to  N periodic  proof 
tests  in  the  design  service  life  T_,  the  probability  of  failure 
within  the  design  service  life,  u pf(rQ,N),  is 

N 

Pf(rn,N)  = 1 - * (1-p.)  (31) 

T u i=l  1 
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and  the  reliability  of  the  composite  within  the  design  service  life 
is  rN  = 1 - Pf(r0,N). 

I (6)  Probability  of  Fai’ure  Without  Proof  Test 

Let  P(t)  be  the  probability  of  failure  in  the  service 
r time  (0,t)  for  components  without  being  proof-tested.  The  solu- 

tion for  P(t)  can  easily  be  derived  in  a similar  manner  as  Eq. 

17;  with  the  result. 


P(t) 


-H(R  =x,t) 
e u dx 


(32) 


in  which  fR  (x)  is  the  probability  density  function  of  the  ultimate 
strength  0 RQ  and  is  obtained  by  differentiating  FR  (x)  given  by 
Eq.  1 with  respect  to  x,  K0 


Vx)  " f (t)  e'(x/6)”  (33) 

and  H[R  =x,t]  is  equal  to  H(x)  given  by  Eq.  27  in  which  T should  be 
replaced  by  t. 

(7)  Non-Renewal  Policy 

The  solutions  derived  in  Eqs.  25-27  hold  for  the  renewal 
policy,  i.e.,  a new  component  is  manufactured  and  proof-tested  to 
replace  every  component  which  fails  under  proof  testing.  A special 
case  of  interest  is  that  no  replacement  is  made  for  the  components 
destroyed  by  proof  testing.  In  other  words,  the  airplane  becomes 
unavailable  for  service.  Under  such  a non-renewal  policy,  the 
general  solutions  given  by  Eqs.  25-27  still  hold  except  that  the 
second  term  (summation  terms)  of  Eq.  25  should  be  disregarded, 
since  it  represents  the  failure  probability  due  to  renewal  com- 
ponents. 
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Exampl e 1 : Bonded  Joint  of  Fighter  Aircraft  Wing 

A boron/titanium  bonded  joint  has  been  tested  under  the  F-lll 
fighter  maneuver  loading  spectra  of  Fig.  3 [10,22].  The  mean  load 
(one  g load)  to  the  wing  is  2.1  x 10&  in-#  of  bending  moment  which 
results  in  6.734  kips  of  force  to  the  bonded  joint  (i.e.,  10^  in-# 
of  bending  moment  produces  3.25  kips  of  force  to  the  joint).  The 
exceedance  curve  of  maneuver  loads  for  one  flight  is  displayed  in 
Fig.  3 in  which  the  abscissa  represents  the  square  of  bending 
moment  measured  from  the  mean  load,  (aBM)2.  The  ordinate  repre- 
sents the  average  number  of  crossings  of  aBM  level  per  flight.  It 

is  noticed  that  the  wing  is  subjected  to  328  cycles  of  significant 

loads  and  one  flight  is  of  3 hours  duration. 

According  to  the  method  of  Press  [21],  the  exceedance  curve 
of  Fig.  3 can  be  reasonably  expressed  as  the  superposition  of  two 
straight  (dashed)  lines  as  indicated.  As  a result,  the  exceedance 
curve  of  the  maneuver  load  per  flight  can  be  written  analytically 
in  the  form  of  Eq.  10  in  which  m=2,  and  ui,  U2>  oi  and  02  are 
measured  directly  from  the  dashed  lines  of  Fig.  3.  After  appro- 
priate conversion  into  forces  applied  to  the  bonded  joint,  it  can 

be  shown  that  N*ui  = 15.8,  = 16.194  kips,  N*u2  = 158,  o2  = 7.89 

kips,  and  xg  = 6.734  kips. 

Test  results  given  by  Ref.  10  indicate  that  the  ultimate 
strength  of  the  bonded  joint  can  be  represented  by  a two-parameter 
Weibull  distribution  with  the  shape  parameter  a = 11.62  and  the 
characteristic  ultimate  strength  (scale  parameter)  e = 109  kips. 
Test  results  on  the  residual  strength  under  flight-by-flight  random 
service  spectra  indicate  that  the  form  of  Eq.  4 for  the  strength 
degradation  is  satisfactory  and  that  c = 10.12.  With  appropriate 
transformation  of  the  results  given  by  Reference  10,  it  can  be  shown 
that  <t  = 1.55  x 10^  kipsc  per  flight,  where  R(t)  and  R(0)  are  ex- 
pressed in  terms  of  kips  and  t represents  the  number  of  flights. 
Note  that  one  life  time  is  equal  to  1334  flights. 

Supposing  that  the  design  service  life  of  the  bonded  joint  is 
1500  flights,  the  probability  of  failure  (1 -rel iabi 1 i ty)  of  the 
bonded  joint  within  the  service  time  of  t flights  is  computed  from 
Eq.  32  and  is  plotted  in  Fig.  4 as  a dashed  curve  where  no  proof 
testing  is  performed.  Also  plotted  in  Fig.  4 are  the  solid  curves 
representing  the  probabilities  of  failure  of  the  bonded  joint  when 
it  is  proof-tested  only  once  prior  to  service  at  various  proof 
load  level,  rg.  It  is  observed  from  Fig.  4 that  a single,  initial 
proof  test  at  the  proof  load  level  of  rg  = 100  ksi  does  result  in 


a significant  reliability  improvement  within  the  service  time  of 
1000  flights,  but  it  has  little  advantage  within  the  design  service 
life  of  1500  flights.  Therefore,  periodic  proof  testing  in  service 
is  needed  in  order  to  maintain  a reasonable  level  of  reliability 
within  the  design  service  life. 

The  probability  of  failure  of  the  bonded  joint  under  periodic 
proof  tests  in  service  is  calculated  from  Eqs.  25  and  30  and  plotted 
in  Fig.  5 for  various  number,  N,  of  proof  tests  and  various  proof 
load  levels.  In  Fig.  5,  the  number  of  proof  tests  Nz15  implies 
that  proof  testing  is  performed  at  every  100  flights  of  service, 
i.e.,  one  service  interval  is  100  flights.  Fig.  5 clearly  demon- 
strates that  significant  improvement  on  the  reliability  of  bonded 
joints  can  be  achieved  by  the  application  of  periodic  proof  tests  and  that 
the  reliability  increases  as  the  number  of  periodic  proof 
tests  increases  or  as  the  proof  load  level  increases. 

Damage  to  the  bonded  joint  by  proof  tests  has  been  neglected  ir, 
the  numerical  example  because  of  lack  of  quantitative  information 
regarding  the  damaging  functions  D-i  and  D£  (Appendix  II).  It  should 
be  accounted  for  later  when  the  information  becomes  available. 


The  probability  of  failure,  Pf(rg,N)  (Eq.  31)  within  the  design 
service  life  of  1500  flights,  is  summarized  in  Fig.  6 for  various 
proof  load  levels.  One  significant  observation  is  that  associated 
with  each  proof  load  level,  there  is  a limit  on  the  number,  N,  of 
proof  tests  beyond  which  the  reliability  improvement  is  negligible. 
Such  a limit  sets  a bound  for  the  reliability  improvement  as  can  be 
observed  from  the  asymptote  of  each  curve  in  Fig.  6.  Thus,  once  a 
proof  load  level  is  selected,  there  is  an  ultimate  reliability  im- 
provement beyond  which  no  improvement  can  be  obtained.  For  in- 
stance, a reliability  of  0.99  (Pf(rg,N)  = 10'2)  f0r  the  bonded 
joint  can  be  achieved  by  either  2 proof  tests  at  100  kips  or  3 
proof  tests  at  95  kips  or  5 proof  tests  at  90  kips.  However,  if 
the  reliability  of  the  bonded  joint  is  specified  to  be  greater  than 
0.999  (Pf(rg,N)  = 10-3),  a proof  load  level  below  95  kips  can  not 
achieve  such  a reliability  requirement  regardless  of  the  number  of 
proof  tests. 

It  is  important  to  note  that  a proof  load  level  of  80  kips  for 
the  bonded  joint,  which  is  73.4%  of  the  characteristic  ultimate 
load  (e  = 109  kips)  results  in  insignificant  reliability  improvement 
unless  the  number  of  proof  tests  is  high,  e.g.,  N=20  (see  Fig.  6). 
According  to  design  practice,  the  limit  load  is  66.7%  of  the  ultimate 
load  (the  ratio  is  1 to  1.5).  Therefore,  it  follows  from  these 
observations  that,  for  the  particular  example  considered  herein, 
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periodic  proof  testing  at  the  limit  load  does  not  serve  the  purpose 
of  reliability  improvement  unless  the  fleet  size  is  very  large  or 
to  eliminate  design  errors.  This  observation  is  consistent  with  the 
conclusions  for  metallic  materials  1.7,8]  that  a low  proof  load  level 
does  not  produce  meaningful  reliability  improvement. 


Example  2:  A Glass/Epoxy  Component  for  a Transport-Type  Aircraft 

Wing 

A glass/epoxy  tt/4  laminate  subjected  to  transport- type 
aircraft  loading  spectra  is  considered.  The 

ultimate  strength,  Rq,  of  such  a laminate  has  been  shown  experi- 
mentally to  follow  a two-parameter  Wei  bull  distribution  [1]  with 
the  shape  parameter  a = 12.3  and  the  scale  parameter  (characteris- 
tic ultimate  stress)  6 = 53  ksi.  Test  results  [1]  indicate  that 
the  parameter  c associated  with  the  strength  degradation  model 
(Eq.  4)  is  c = 9.28.  As  mentioned  previously,  the  parameter  <t> 

(Eq.  3)  depends  on  the  characteristics  of  service  loads  and  it  has 
to  be  determined  by  test  results  under  flight-by-flight  service 
load  spectra.  The  following  turbulence  parameters  associated  with 
a typical  gust  load  are  used  [19];  U]  = 0.995,  U£  = 0.005,  cr]  = 

0.65  ksi,  02  = 1.8  ksi  (see  Eq.  8).  The  mean  stress  (stress  due 
to  one  g load)  is  xg  = 8 ksi  (Eq.  8).  With  the  loading  spectra 
given  above  as  well  as  the  test  results  given  by  Ref.  1,  it  is 
assumed  that  $ = 40  x 10^  ksic  per  flight  hour.  Note  that  in 
this  example  both  the  residual  strength,  R(t),  and  the  ultimate 
strength,  Rg,  appearing  in  Eq.  4 have  units  of  ksi,  and  t repre- 
sents the  number  of  flight  hours.  The  structure  is  subjected  to 
600  cycles  of  gust  loads  Der  flight  hour,  i.e.,  N*  = 600  (Eq.  8). 

Supposing  that  the  design  service  life  for  such  a component 
is  10,000  flight  hours,  the  probability  of  failure  within  t flight 
hours  is  plotted  in  Fig.  7 as  a dashed  curve  for  the  component 
without  being  proof-tested  (Eq.  30).  Also  plotted  in  Fig.  7 as 
solid  curves  are  the  probabilities  of  failure  for  the  components 
which  are  proof  tested  only  once  prior  to  service.  It  is  observed 
that  a single  proof  test  at  a level  of  45  ksi  results  in  a signifi- 
cant reliability  improvement  within  5,000  flight  hours.  However, 
within  the  design  service  life  of  10,000  flight  hours,  a single 
proof  test  has  little  benefit  and  hence  periodic  proof  test  in 
service  is  necessary  to  maintain  a reasonable  level  of  reliability. 

The  probability  of  failure  of  the  component  under  periodic 
proof  tests  in  service  is  plotted  in  Fig.  8 for  various  proof  load 
levels.  Fig.  8 clearly  demonstrates  the  significant  improvement 
of  composite  reliability  by  the  use  of  periodic  proof  tests. 
Furthermore,  the  composite  reliability  increases  as  the  proof  load 
level  increases  or  as  the  number  of  periodic  proof  tests  increases. 
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It  should  be  mentioned  that  limited  amount  of  test  data  for  a 
ir/4  glass/epoxy  laminate  given  in  Ref.  2 indicates  that  the  damage 
D]  (see  Appendix  II)  is  neg- 

ligible for  a proof  load  level  rg  = 46.75  ksi,  i.e.,  88%  of  the 
characteristic  strength.  Another  set  of  test  data  for  the  same 
composite  given  in  Ref.  1 indicates  that  the  damage  D2 

(see  Appendix  II)  is  negligible  for  a 
proof  load  level  rg  = 48  ksi,  i.e.,  90%  of  the  characteristic 
strength  &.  In  view  of  these  results,  we  restrict  our  investiga- 
tion to  the  case  where  the  proof  load  level  ro  is  below  45  ksi,  so 
that  damage  to  the  composite  resulting  from  periodic  proof  tests 
can  be  neglected. 

The  probability  of  failure,  pf(r0,N),  within  the  design  service 
life,  i.e.,  10,000  flight  hours,  is  displayed  in  Fig.  9.  Similar 
conclusions  as  in  the  case  of  the  bonded  joint  of  fighter  have 
been  observed;  (i)  associated  with  each  proof  load  level,  there 
is  a limit  on  the  number  of  periodic  proof  tests  beyond  which  the 
benefit  of  reliability  improvement  vanishes,  (ii)  Each  curve  in 
Fig.  8 has  an  asymptote  which  is  a limiting  reliability  one  can 
achieve  for  a particular  level  of  proof  load,  regardless  of  the 
number  of  proof  tests,  (iii)  A proof  load  level  at  the  limit  load, 
i.e.,  0.67b  = 35.5  ksi,  does  not  produce  significant  reliability 
improvement  for  composites,  unless  the  fleet  size  is  extremely  large. 
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SECTION  VI 


FORMULATION  FOR  OPTIMAL  PERIODIC  PROOF  TEST 


It  has  been  demonstrated  in  the  previous  section  that  the  reli- 
ability of  composites  increases  as  the  number  of  periodic  proof  tests 
increases  or  as  the  proof  load  level  increases,  provided  that  the 
proof  load  level  is  below  the  critical  load  level  which  may  damage 
the  composites.  However,  as  the  number  of  periodic  proof  tests  in- 
creases, the  cost  of  proof  tests  increases  (including  the  total  cost 
of  performing  proof  tests,  down  time,  nonavailability  for  service, 
etc.).  Furthermore,  as  the  level  of  proof  load  increases,  the  prob- 
ability of  destroying  components  under  periodic  proof  tests  increases, 
i.e.,  the  expected  number  of  components  to  be  destroyed  by  periodic 
proof  tests  increases,  and  thus  increasing  the  cost  of  replacement. 
Since  the  damage  due  to  proof  tests  has  not  been  quantitatively  inves- 
tigated, we  shall  restrict  ourselves  to  the  case  where  the  proof  load 
level  is  below  the  critical  load  level  so  that  proof  testing  does  not 
damage  the  composites. 

Although  high  level  of  composite  reliability  can  be  achieved 
through  the  application  of  periodic  proof  tests,  the  costs  of  proof 
tests  and  replacements  may  be  significant  and  have  to  be  minimized. 
There  is  indeed  a trade-off  potential  between  the  reliability  of 
composites  and  the  costs  of  proof  tests  and  replacement.  It  is  the 
purpose  of  this  section  to  perform  an  exploratory  study  to  establish 
the  optimal  proof  load  level  and  the  optimal  number  of  periodic 
proof  tests  such  that  an  objective  function,  such  as  the  total  cost 
or  utility,  is  minimized. 

The  concept  of  the  expected  (statistical  average)  cost  of 
failure  in  service  has  been  used  to  obtain  the  optimal  proof  load 
level  and  the  optimal  thickness  for  spacecraft  pressure  vessels 
which  are  subjected  to  a single  proof  test  on  the  ground  prior  to 
the  mission  [7].  It  has  also  been  applied  to  the  optimum  design 
of  other  structures  subjected  to  a single  proof  test  prior  to  ser- 
vice [8].  Furthermore,  the  concept  of  the  expected  cost  of  failure 
is  applicable  to  the  optimization  of  inspection  frequency  for  metal- 
lic aircraft  structures  [20].  Such  a concept  will  be  employed 
herein  for  the  optimization  of  the  periodic  proof  test. 

The  objective  function  to  be  minimized  in  order  to  obtain  the 
optimal  proof  load  level  and  the  optimal  number  of  periodic  proof 
tests  is  the  total  expected  (statistical  average)  cost.  The  total 
expected  cost,  EC*  considered  herein  consists  of  three  parts  (i)  the 
expected  cost  of  performing  periodic  proof  tests,  (ii)  the  expected 
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cost  of  components  to  be  destroyed  by  periodic  proof  tests  and  (iii) 
the  expected  cost  of  component  failure  in  service,  including  possible 
loss  of  the  component  itself,  mission  degradation,  loss  of  lives  and 
equipments,  nonavailability  for  service,  etc., 

EC*  = C-j  [N  + T(r0,N)]  + C2T(rQ,N)  + CfPf(rQ,N)  (34) 


in  which 

C-j  = cost  of  performing  one  proof  test  for  one  component 

N = total  number  of  scheduled  periodic  oroof  tests  in 
the  design  service  life 

T(rn,N)  = expected  (statistical  average)  number  of  components 
to  be  destroyed  by  and  subsequently  replaced  after  the 
periodic  proof  tests  in  the  design  service  life.  It  is 
a function  of  the  proof  load  level,  r„,  and  the  number, 

N,  of  the  scheduled  periodic  proof  tests. 

= cost  of  one  component 

C,  = cost  of  component  failure  in  service,  including  mission 
degradation,  loss  of  component  itself,  possible  loss  of 
lives  and  properties,  etc. 

Pf(r0,N)  = probability  of  failure  in  the  design  service  life, 
uwhich  is  a function  of  the  proof  load  level,  r»,  and  the 
number,  N,  of  scheduled  periodic  proof  tests. 

The  expected  cost  of  performing  periodic  proof  tests, 
Cl[N+I(r0,N)],  is  proportional  to  the  total  expected  number  of 
proof  tests.  The  total  expected  number  of  proof  tests  consists 
of  the  number,  N,  of  scheduled  periodic  proof  tests  plus  the 
expected  (average)  number,  I(rg,N),  of  components  to  be  destroyed 
by  proof  tests,  since  when  a component  is  destroyed  by  the  proof 
test,  a new  component  is  manufactured  and  proof-tested  for  replace- 
ment. 


The  second  term  in  Eq.  34,  C2l(rQ,N),  represents  the  total 
expected  cost  of  components  destroyed  by  periodic  proof  tests. 
The  third  term,  CfPf(ro,N),  is  the  expected  cost  of  component 
failure  in  service. 


Dividing  Eq.  34  by  Cp  one  obtains 
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(35) 


EC  = Yl[N  + I(r0,N)]  + Y2I(r0,N)  + Pf(rQ,N) 


in  which 


EC  = EC  /Cf 

is  the  relative  expected  cost  (or  risk  function)  and 


(36) 


Y-|  = VCf 
^2  = ^/Cf 


(37) 


In  Eq.  37,  Y,  is  the  ratio  of  the  cost  of  performing  one  proof 
test  for  one  component  to  the  cost  of  component  failure  in  service. 
y2  is  the  ratio  of  the  cost  of  one  component  to  the  cost  of  component 
failure  in  service.  Both  Y,  and  y2  are  nondimensional  and  they 
represent  the  relative  importance,  respectively,  of  the  cost  of  proof 
test  and  of  the  cost  of  component  itself  with  respect  to  the  cost  cf 
component  failure  in  service.  They  are  important  input  parameters 
in  the  optimization  process  and  have  to  be  estimated  subjectively  or 
objectively  if  possible. 

The  estimation  of  the  probability  of  failure,  Pf(rg,N),  in  ser- 
vice has  been  discussed  in  Section  IV.  It  has  been  shown  that 
Pf(rg,N)  is  a monotonical ly  decreasing  function  of  rg  and  N.  The 
expected  number,  I(rg,N),  of  components  to  be  destroyed  by  periodic 
proof_tests  will  be  derived  in  the  next  section.  It  will  be  shown 
that  I(rg,N)  is  a monotonical ly  increasing  function  of  rg  and  N. 

The  optimization  problem  considered  herein  is  to  find  the 
optimal  number,  fi,  of  the  periodic  proof  tests  and  the  optimal 
proof  load  level so  that  the  objective  function  EC,  the 
relative  expected  cost  (or  risk  function),  is  minimized,  while  the 
probability  of  failure  of  the  component  should  be  less  than  a 
specified  allowable  level  P . The  optimization  problem  can  be 
stated  as  follows; 

minimize  the  objective  function  EC 


EC  = Yl[N  + I(r0,N)]  + y2I(r0,N)  + Pf(rQ,N) 


(38) 


subject  to  the  constraint 


Pf(r0,N)  < Pa 


(39) 


where  Pa  is  the  allowable  level  of  failure  probability. 
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The  mathematical  techniques  are  available  for  solving  the  opti- 
mal solution  r^  and  N for  the  system  of  equations  given  by  Eqs.  38 
and  39,  for  instance  the  method  of  feasible  direction  [26]  and  the 
nonlinear  programming  [27].  These  classical  techniques  will  not 
be  discussed  and  the  interested  reader  is  referred  to,  e.g.,  Refs. 
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SECTION  VII 

EXPECTED  NUMBER,  T(r0,N),  OF  COMPONENTS  TO  BE  DESTROYED 
BY  PERIODIC  PROOF  TESTS 


Let  L be  the  number  of  newly  manufactured  components  (prior 
to  service)  failed  under  the  proof  load  r q before  a component  that 
survives  the  proof  load  is  obtained.  Obviously,  L is  a statisti- 
cal variable.  The  statistical  distribution  of  L can  be  shown  to 
follow  a negative  Binomial  distribution, 

P[L  = £]  = (1  - Bq)b£  ; l = 0,  1,  2,  •••  (40) 

in  which  Bn  is  the  probability  of  failure  of  the  new  component 
under  the  proof  load  rQ,  which  can  be  obtained  from  Eq.  1 

B0  = ptRo  1 ro^  = 1 ' exP^r0/S)  } (41) 

and  ( 1 — Bg ) is  the  probability  of  surviving  r^. 

The  expected  (statistical  average)  number,  L,  of  new  components 
failed  under  the  proof  load  r_  before  the  one  that  survives  r^  is 
obtained,  can  be  computed  by  uuse  of  Eq.  40 


- 00  t Bn 

L = I £(1-B  ) = yf-  (42) 

£=0  0 0 1_B0 


Let  I.  ( j=l  ,2 ,3 • • • , N)  be  the  expected  (statistical  average) 
number  of  Components  destroyed  by  the  jth  proof  test  performed  at 
(j-l)T  flights.  Then,  the  expected  number  of  component^  destroyed 
under  the  initial  (first)  proof  test  prior  to  service,  1^,  is 
obvious 


I -i  = L = 


1-B, 


(43) 
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The  expected  number  of  components  failed  under  the  second  proof 
test  performed  at  T is  attributed  to  two  different  populations;  (i) 
the  original  component  (ii)  the  new  component  manufactured  at  T, 
when  the  original  component  fails  under  the  2nd  proof  test  with 
probability  . Hence, 


X2  = Bi 


K 1 
KJ 


in  which  is  the  probability  that  the  original  component  will 
fail  under  the  second  proof  test  performed  at  T and  is  given  by 
Eqs.  6-7.  Since  we  are  concerned  with  one  component  B.  x 1 is 
the  expected  number  of  the  original  component  to  be  destroyed  by 
the  2nd  proof  test.  B„/(l-B0)  is  the  expected  number  of  failures 
for  the  renewal  component  manufactured  at  T,  when  the  original 
component  fails  (with  probability  B-j ) . 

Eq.  44  can  be  written  as 


The  expected  number  of  components  to  be  destroyed  by  the  3rd 
proof  test  performed  at  2T  comes  from  three  different  populations; 
(i)  the  original  component  which  survives  the  2nd  proof  test,  (ii) 
the  renewal  component  manufactured  at  2T  when  the  original  com- 
ponent fails  under  the  3rd  proof  test  (with  probability  Bp),  and 
(iii)  the  renewal  component  manufactured  at  T.  These  three  contri- 
butions are  given,  respectively,  in  the  following; 


B2  + B2 


ftl* 


in  which  Bp  is  given  by  Eq.  6 for  j=2. 

The  first  term  Bp  x 1 is  the  expected  number  of  failures 
attributed  to  the  original  component  and  the  second  term  is  the 
expected  number  of  failures  attributed  to  the  renewal  component 
manufactured  at  2T  when  the  original  component  fails  at  2T  (with 
probability  Bp).  The  expected  number  of  failures  attributed  to 
the  renewal  component  manufactured  at  T is  Ip  and  the  probability 
of  having  such  a renewal  component  is  B, . Hence  B]Ip  is  the 
contribution  from  the  renewal  component  manufactured  at  T. 
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Eq.  46  can  be  written  as 


1 -Br 


+ B^ 


(47) 


in  which  I2  is  given  by  Eq.  45. 

The  expected  number  of  components,  L,  to  be  destroyed  by  the 
4th  proof  test  performed  at  3T  is  contributed  by  4 different  popu- 
lations; (i)  the  original  component  which  has  survived  all  the 
previous  proof  tests  (ii)  the  renewal  component  manufactured  at 
3T  when  the  original  component  fails  under  the  4th  proof  test  at  3T 
(with  probability  B3),  (iii)  the  renewal  component  manufactured  at 
T for  replacing  the  original  component  (with  probability  B-| ) an^  (iv) 
the  renewal  component  manufactured  at  2T  for  replacing  the  original 
component  (with  probability  B2).  Thus, 


*4  B3  + B3 


1-B 


0-1 


+ B1I3  + B2T2 


(48) 


1 -Bn  + Bl!3  + B2lZ 


in  which  B^  is  given  by  Eq.  6 for  j=3. 

In  a similar  manner,  it  can  be  shown  that  the  expected  number 
of  components  to  be  destroyed  by  the  jth  proof  test  is 


Bi  1 j'2 

I,  » i-4-1  + 6,  o l B,I, 


lj  1-B 


0 


j-2 


(49) 


in  which  <5.  ?=0  for  j ±2  and  6.  2=1  for  j>2. 

The  total  expected  number  of  components  to  be  destroyed  by 
periodic  proof  tests  in  the  design  service  life  (0,NT)  is  therefore. 


N 

I(rn,N)  = z I 
U j = l J 


(50) 


Substitution  of  Eq.  49  into  Eq.  50  yields 
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(51) 


N B . N j-2  _ 

I(r0’N)  = z MT+  z z Vi-k 

j=l  0 j=3  k=l  k J k 


where  I.  . is  given  by  Eq.  49.  Note  that  both  B„  and  B.  are  func- 
tions J of  rn,  and  hence  I (rn,N)  given  by  Eq.51  is  Ja  function 
of  r^  and  N.  u 

The  solution  for  I(rQ,N)  derived  in  Eq.  51  holds  for  the 
renewal  policy,  i.e.,  a new  component  is  manufactured  and  proof- 
tested  to  replace  the  component  destroyed_by  proof  tests.  For 
the  non-renewal  policy,  the  solution  for  I(rn,N)  given  by  Eq.  51 
still  holds  except  that  the  second  term  (double  sum)  should  be 
disregarded,  since  it  represents  the  expected  number  of  failures 
under  proof  tests  due  to  the  renewal  components. 

It  should  be  mentioned  that  the  expected  (statistical  average) 
number,  I(r„,N),  of  components  to  be  destroyed  by  periodic  proof 
tests  derived  in  Eq.  51  is  for  one  airplane  (or  one  component). 

When  a fleet  of  m airplanes  (or  components)  is  considered,  the 

destroyed  by  the 
,N)  represents  the 
the  total  components 
in  a fleet  to  be  destroyed  by  the  proof  tests.  Furthermore,  under 
the  renewal  policy  100I(r„,N)  is  also  the  expected  percentage  of 
replacement  for  components  destroyed  by  the  proof  tests. 


expected  number  of  components  in  a fleet  to  be 
proof  tests  is  mI(r„,N).  As  a result,  I001(rn 
expected  (statistical  average)  percentage  of  U 
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SECTION  VIII 

NUMERICAL  EXAMPLES  FOR  OPTIMAL  PERIODIC  PROOF  TEST 


Example  3:  A Bonded  Joint  of  Fighter  Aircraft  Wing 

The  same  numerical  example  for  a boron/titanium  bonded  joint 
of  fighter  aircraft  as  given  in  Example  1 is  considered.  In  the 
desi_gn  service  life  of  1500  flights,  the  expected  percentage, 
100I(rg,N)  (Eq.  51),  of  components  to  be  destroyed  by  periodic 
proof  tests  is  plotted  in  Fig.  10  under  the  renewal  policy.  It 
is  observed  that  I(rp,N)  increases  monotonical ly  as  the  proof 
load  level,  rQ,  or  tne  number,  N,  of  proof  tests  increases. 

In  Fig.  10,  the  expected  percentage  of  components  to  be  des- 
troyed by  proof  tests  exceeds  100%  for  rg  = 100  kips  and  N>3. 

This  is  not  surprising  under  the  renewal  policy,  since  a n-ew  com- 
ponent is  manufactured  and  proof-tested  to  replace  the  component 
which  fails  under  the  proof  test.  It  is  due  to  such  a renewal 
policy  that  the  expected  percentage  of  replacement,  1 001 ( rQ , N ) 

(or  the  expected  percentage  of  components  to  be  destroyed  by  proof 
tests)  in  the  design  service  life,  may  be  greater  than  100  percent 
when  the  proof  load  level  or  the  number  of  proof  tests  is  high. 

Under  the  non-renewal  policy,  100I(r0,N)  is  bounded  by  100  percent 
(see  the  first  term  of  Eq.  51).  For  instance,  I(r0,N)=l  under  the 
non-renewal  policy  indicates  that  all  the  components  are  expected 
to  be  destroyed  by  proof  tests  and  no  airplane  will  be  available 
for  service  by  the  end  of  the  design  service  life.  Under  the 
renewal  policy,  I( 
service  life,  all 

tially  at  t=0,  referred  to  as  the  original  components,  are  expected 
to  be  replaced  by  the  new  components  manufactured  later,  referred 
to  as  the  renewal  components. 

The  relative  expected  (average)  cost  EC  (Eq.  38)  is  plotted  in 
Figs.  11  (a)-ll  (c)  as  solid  curves  for  different  values  of  y-|  and 
Yp.  Also  plotted  in  these  figures  as  dashed  curves  are  the  proba- 
bility of  failure,  P^(rQ,N),  of  composites  in  the  design  service 
life.  The  characteristic  ultimate  strength  e is  109  kips.  Several 
interesting  observations  are  given  in  the  following; 

(i)  For  a chosen  proof  load  level  rQ  and  given  values  of  y1  and 
Yp , there  is  an  optimal  number,  N^,  for  the  periodic  proof  test  at 
which  the  relative  expected  cost  EC  is  minimum.  This  is  observed 
from  Fig.  11  that  each  solid  curve  has  a minimum  as  indicated  by  a 
circle. 

(ii)  The  optimal  number,  N_,  of  the  periodic  proof  test  for  a 
chosen  rg  increases  as  the  values  of  y-j  and  yp  decrease,  indicating 


rn,N)=l  indicates  that  by  the  end  of  the  design 
tne  components  which  are  put  into  service  ini- 
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that  as  the  costs  of  proof  testing  and  replacement  decrease,  the  op- 
timal number  of  the  periodic  proof  test  increases.  This  is  consistent 
with  our  intuition  that  the  less  expensive  the  cost  of  proof  testing 

I and  the  cost  of  components  are,  the  more  one  can  afford  to  perform 

more  proof  tests  to  achieve  higher  level  of  reliability  for  composites. 

r For  a chosen  proof  load  level  rQ  and  given  values  of  y\  and  yo» 

the  local  minimum  as  indicated  by  a circle  may  or  may  not  be  the 
optimal  solution  depending  on  the  constraint  of  the  allowable  proba- 
bility of  failure  Pa  given  by  Eq.  39.  Since  the  probability  of 
failure,  Pf(rg,N),  is  also  plotted  in  Fig.  11,  it  can  easily  be 
determined  whether  the  local  minimum  is  the  optimum  solution.  For 
instance,  if  P,=10‘3  (reliability  0.999),  it  is  clear  from  Fig.  11(a) 
that  for  rg=100  kips,  all  the  minima  are  optimal  solutions  for  various 
Y1  and  y?  values.  In  such  a situation,  the  constraint  of  Eq.  39  is 
said  to  be  inactive  indicating  that  inequality  holds  for  Eq.  39.  For 
rn=95  kips,  however,  all  the  minima  are  not  feasible  solutions,  since 
tne  probabilities  of  failure  associated  with  these  minima  are  greater 
than  Pa  as  indicated  by  Fig.  11(b).  It  is  observed  from  Fig.  11(b) 
that  the  optimal  solution  is  N= 1 4 for  some  values  of  y-j  and  Y2  as 
indicated  by  stars.  In  this  situation,  the  solution  is  primarily 
determined  by  the  constraint  (Eq.  39),  and  hence  the  equality  sign 
holds  for  Eq.  39.  The  constraint  is  said  to  be  active. 

Above  discussions  are  based  on  the  premisethat  a proof  load 
level  is  chosen  a priori.  For  practical  applications,  it  may  be 
desirable  to  determine  both  the  optimal  proof  load  level,  £q,  and  the 
optimal  number,  N^,  of  periodic  proof  tests  for  given  values  of  y]  and 
y?.  To  accomplish  this  objective,  the  solid  curves  plotted  in  Fig. 

10  associated  with  a particular  set  of  yi  and  Y2  values  are  replotted 
in  Fig.  12.  For  instance,  if  Pa=10_s  it  is  observed  from  Fig.  12(a) 

• that  £o=95  kips,  N=3  results  in  a minimum  EC  as  indicated  by  a circle 

where  the  constraint  of  Eq.  39  is  satisfied.  On  the  other  hand, 
if  Pa=10'3j  the  solution  rg=95  kips,  N=3  is  not  feasible  since  the 
associated  probability  of  failure  is  greater  than  10-3.  The  optimal 
solution  is  rg=100  kips,  N=2,  as  indicated  by  a square.  From  the 
observation  of  extensive  numerical  results,  general  trends  for  the 
optimal  solution  are  as  follows; 

(i)  when  the  cost  of  component  is  high  but  the  cost  of  proof 
tests  is  not  high,  i.e.,  y^  is  not  small  but  y-j  is  very  small,  the 
optimal  solution  is  in  favor  of  low  proof  load  level,  since  high 
proof  load  level  tends  to  destroy  more  components  as  shown  by  Fig. 

10, 

(ii)  when  the  cost  of  performing  proof  tests  and  the  cost  of 
replacement  are  low,  i.e.,  y-j  and  y2  are  small,  the  optimal  solution 

is  in  favor  of  high  proof  load  level  and  large  number  N of  proof  tests. 
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This  is  because  one  can  afford  to  loose  more  components  to  achieve 
high  level  of  reliability,  and 


(iii)  when  the  constraint  on  the  allowable  failure  probability 
is  stringent,  i.e.,  Pa  is  small,  the  optimal  solution  is  in  favor  of 
the  high  proof  load  level. 


Another  significant  observation  is  that  the  optimal  solution  is 
not  critical  to  the  proof  load  level,  in  the  sense  that  EC  is  a 
slowly  varying  function  of  rg.  Hence,  if  we  do  not  choose  exactly  the 
optimal  proof  load  level,  the  increase  in  the  relative  cost  EC  is  not 
significant.  For  instance,  the  optimal  solution  for  yi=10‘2,  yo=10"' 
(see  Fig.  12a)  is  rg=95  kips,  N=3  with  EC=0.105.  If  we  choose  rQ=100 
kips,  N=2,  the  relative  cost  EC  is  0.11,  and  EC=0.12  for  rQ=90  kips, 
N=5.  This  conclusion  is  of  practical  importance  and  is  very  benefi- 
cial to  the  planning  of  proof  tests,  since  we  may  choose  a preferable 
level  of  proof  load  without  much  penalty.  On  the  other  hand,  however, 
the  relative  expected  cost  EC  is  sensitive  to  the  change  of  N,  the 
number  of  periodic  proof  tests,  as  indicated  by  each  curve  of  Fig.  11. 
As  a result,  care  should  be  taken  in  choosing  the  optimal  number 
for  periodic  proof  tests. 


Example  4:  Transport-Type  Aircraft 

The  same  numerical  example  for  a glass/epoxy  tt/4  laminates  as 
given  in  Example  2 is  considered.  In  the  design  service  life  of 
10,000  flight  hours,  the  expected  percentage,  100I(rQ,N),  of  com- 
ponents to  be  destroyed  by  periodic  proof  tests  is_pYotted  in  Fig. 

13  under  the  renewal  policy.  It  is  observed  that  I ( r n , N ) increases 
monotonical ly  as  the  proof  load  level,  r0,  or  the  number,  N,  of 
periodic  proof  tests  increases. 

The  relative  expected  cost  EC  is  plotted  in  Figs.  14(a)-14(c) 
as  solid  curves  for  various  values  of  proof  load  level,  r^. 

Also  plotted  in  Fig.  14  as  dashed  curves  are  the  probability  of 
failure,  Pr(rQ,N),  within  the  design  service  life.  The  charac- 
teristic ultimate  strength  3 is  53  ksi. 

The  relative  expected  cost  EC  is  also  plotted  in  Fig.  15  for 
a particular  set  of  yi  and  Y2  values.  The  optimal  proof  load  level, 
rg,  and  the  optimal  frequency,  N_,  of  periodic  proof  tests  can  be 
determined  graphically  from  Figs.  14  and  15. 

General  trends  for  the  optimal  solution  observed  in  the  example 
of  boron/titanium  bonded  joint  hold  for  the  present  example.  The 
important  fact  that  the  optimal  solution  is  not  critical  to  the 
proof  load  level  is  also  shown  in  Fig.  15.  It  is  observed  from 


31 


L 


Fig.  15  that  the  proof  load  level  can  be  chosen  from  40  ksi  to  45 
ksi  (i.e.,  0.756  to  0.85b)  without  much  penalty  involved.  Hence  a 
designer  has  certain  degree  of  freedom  to  choose  a preferable  proof 
I load  level  in  this  region,  but  care  should  be  taken  in  determining 

the  optimal  number,  N,  of  periodic  proof  tests  from  Fig.  15. 


SECTION  IX 
CONCLUSION 


An  exploratory  reliability  analysis  of  composites  under 
random  service  loads  and  periodic  proof  tests  have  been 
presented.  The  composite  reliability  is  obtained  as  a func- 
tion of  the  statistics  of  ultimate  strength,  the  statistics 
of  service  loads,  composite  strength  degradation  charac- 
teristics, design  stresses,  proof  load  levels,  number  of 
periodic  proof  tests,  etc.  It  is  demonstrated  that  the 
reliability  of  composites  can  be  improved  significantly  by 
the  application  of  periodic  proof  tests.  It  is  shown  that 
the  composite  reliability  increases  as  the  number  of  peri- 
odic proof  tests  increases  or  as  the  proof  load  level  in- 
creases, provided  that  the  proof  load  level  is  below  the 
critical  load  level,  r* , which  may  damage  the  composites. 
Another  conclusion  from  this  study  is  that  a low  proof  load 
• level  does  not  produce  meaningful  reliability  improvement, 

unless  the  fleet  size  is  large. 

An  exploratory  study  for  the  optimization  of  periodic 
proof  tests  based  on  cost  and  reliability  analysis  has  also 
been  presented.  The  optimal  proof  load  level  and  the  op- 
timal number  of  periodic  proof  tests  are  determined  by 
minimizing  the  total  expected  (statistical  average)  cost, 
while  the  constraint  on  the  reliability  of  composites  is 
satisfied.  It  is  shown  that  the  optimal  periodic  proof 
test  is  not  critical  to  the  proof  load  level,  in  the  sense 
that  if  a non-optimal  proof  load  level  is  chosen,  the  cost 
penalty  is  not  significant.  This  conclusion  is  very  bene- 
ficial to  the  planning  of  proof  tests.  However,  the  opti- 
mal periodic  proof  test  is  sensitive  to  the  number,  N,  of 
periodic  proof  tests. 
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The  present  study  concentrates  on  the  theoretical  devel- 
opment of  both  the  methodologies  of  reliability  analysis  and 
cost  optimizations  for  composites  and  the  theory  of  periodic 
proof  tests.  Experimental  verifications  for  the  residual 
strength  degradation  model  used  herein  as  well  as  the  theory 
of  periodic  proof  tests  are  presented  in  Ref.  28. 

In  the  numerical  examples,  the  proof  load  level  is 
restricted  to  be  below  the  critical  load  level  r*  that  may 
damage  the  composites.  Experimental  data  Cl-3,  28-29J  in- 
dicate that  the  critical  load  level  r*  is  above  90%  of  the 
characteristic  strength  6.  It  is  believed  that  a proof  load 
level  higher  than  the  critical  load  level,  r*  , is  unac- 
ceptable to  the  design  practice.  Nevertheless,  if  there 
is  any  need  to  raise  the  proof  load  level  beyond  r* , Eq. 

1 1 - 5 and  1 1 - 6 derived  in  Appendix  II  and  III  should  be  used 
where  extensive  test  data  is  needed  to  characterize  the 
damage  functions,  D ^ C r q/6)  and  D7(rQ/6). 


The  premis  of  the  design  practice  seems  to  test  the 
components  at  limit  load,  whereas  the  characteristic  ul- 
timate load  is  1.5  times  the  limit  load.  However,  it  is 
observed  from  the  numerical  examples  that  a proof  load 
level  at  the  limit  load,  which  is  66.71  of  the  characteri- 
stic ultimate  strength  6,  is  too  low  to  produce  signifi- 
cant benefit  as  far  as  the  reliability  improvement  of  com- 
posites is  concerned.  This  conclusion  is  of  practical 
importance . 

The  present  approach  does  not  account  for  the  environ- 
mental effect  explicitly,  such  as  temperature,  humidity, 
stress-corrosion,  aging,  etc.,  because  of  lack  of  statisti- 
cal background  data.  However,  these  important  effects  can 
be  accounted  for  in  the  present  analysis  because  they  can 
be  reflected  in  the  parameters  c and  4>  associated  with  the 
strength  degradation , Q see  Eq . 4J  . As  a result,  c and  4> 
are  functions  of  temperature,  humidity,  aging,  etc.,  and 
have  to  be  determined  from  test  results  under  flight-by- 
flight  real  time  loading  history  superimposed  by  the  vari- 
ations of  temperature,  humidity,  etc.  Further  research 
is  needed  in  this  regard. 
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FIG.  1.:  SERVICE  INTERVAL  AND  PERIODIC  PROOF  TEST 
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FIG.  2.:  PROBABILITY  DENSITY  FUNCTION  OF  RESIDUAL  STRENGTH 
1 VS  SERVICE  TIME 
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FIG.  4.:  PROBABILITY  OF  FAILURE  VS  SERVICE  TIME;  NONE  AND  SINGLE 
PROOF  TEST  (6  = 109  kips) 
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PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (BORON/TITANIUM  BONDED  JOINT  6 = 109  kips) 
(b)  Iq  = 95  kips 


PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (BORON/TITANIUM  BONDED  JOINT  e = 109  kips) 
(c)  fg  = 90  kips 
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PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (BORON/TITANIUM  BONDED  JOINT  e = 109  kips) 
(d)  Tg  = 85  kips 
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PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PP.OOF  TESTS  (BORON/TITANIUM  BONDED  JOINT  6 = 109  kips) 
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PROBABILITY  OF  FAILURE  IN  SERVICE  LIFE  (1500  Flights)  VS  PROOF 
LOAD  LEVEL  , r0,  AMD  NUMBER  OF  PERIODIC  PROOF  TESTS,  N; 
(CHARACTERISTIC:  ULTIMATE  STRENGTH  e = 109  KIPS). 


PROBABILITY  OF  FAILURE  IN  t FLIGHT  HOURS 


FIG,  8.:  PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (*/A  Glass/Epoxy  Laminate  b = 53  ksi): 

(a)  fg  = A5  KSI 
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NO.  OF  FLIGHT  HOURS  t IN  10° 

PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (*/4  Glass/Epoxy  Laminate  b = 53  ksi): 
(b)  Pn  = 42.5  ksi 
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NO.  OF  FLIGHT  HOURS  t IN  I05 

PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  W4  Glass/Epoxy  Laminate  b = 53  ksi): 
(c)  |q  = AO  KSI 


PROBABILITY  OF  FAILURE  IN  t FLIGHT  HOURS 


PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  (*/4  Glass/Epoxy  Laminate  e = 53  ksi): 
(d)  Fq  = 37.5  ksi 


PROBABILITY  OF  FAILURE  IN  t FLIGHT  HOURS 


FIG.  8.:  PROBABILITY  OF  FAILURE  VS  SERVICE  TIME  FOR  VARIOUS  NUMBER  OF 
PERIODIC  PROOF  TESTS  WA  Glass/Epoxy  Laminate  b = 53  ksi): 
(e)  |q  = 35  ksi 
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PROBABILITY  OF  FAILURE  IN  SERVICE  LIFE 


- CO  ro  * m 

o 'o  'o  'o  'o  'o 


FIG.  9.:  PROBABILITY  OF  FAILURE  IN  SERVICE  LIFE  (10,000  Flight  Hours) 
VS  PROOF  LOAD  LEVEL,  fQ.  AND  NUMBER  OF  PROOF  TESTS,  N; 
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PERIODIC  PROOF  TESTS  N 


EXPECTED  PERCENTAGE  OF  FAILURE 
UNDER  PERIODIC  PROOF  TESTS 


NO.  OF  PERIODIC  PROOF  TESTS 

FIG.  10.:  EXPECTED  PERCENTAGE  OF  COMPONENTS  TO  BE  DESTROYED  BY  PERIODIC 
PROOF  TESTS  (BORON/TITANIUM  BONDED  JOINT) 


kJ 
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FIG.  11.:  RELATIVE  EXPECTED  COST  EC  AND  PROBABILITY  OF  FAILURE  P (r0,N) 
VS  NUMBER  OF  PROOF  TESTS  N (BORON/TITANIUM  BONDED  JOINT 
6 = 109  kips)  : 

(a)  fg  = 100  kips 
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FIG.  11.:  RELATIVE  EXPECTED  COST  EC  AND  PROBABILITY  OF  FAILURE  P (r0,N) 
VS  NUMBER  OF  PROOF  TESTS  N (BORON/TITANIUM  BONDED  JOINT 
6 = 109  kips): 
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FIG.  12.:  RELATIVE  EXPECTED  COST  EC  VS  NUMBER  OF  PROOF  TESTS  FOR  VARIOUS 
VALUES  OF  yi  and  y9: 
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FIG.  12.:  RELATIVE  EXPECTED  COST  EC  VS  NUMBER  OF  PROOF  TESTS  FOR  VARIOUS 
VALUES  OF  y ^ and  y2: 
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EXPECTED  PERCENTAGE  OF  FAILURE 
UNDER  PERIODIC  PROOF  TESTS 


FIG.  13.:  EXPECTED  PERCENTAGE  OF  COMPONENTS  TO  BE  DESTROYED  BY  PERIODIC 
PROOF  TESTS  (*/4  Glass/Epoxy  Laminates) 
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FIG.  14. : RELATIVE  EXPECTED  COST  EC  AND  PROBABILITY  OF  FAILURE  PF(r0.N) 
VS  NUMBER  OF  PROOF  TESTS,  N (Glass/Epoxy  */4  Laminates  b = 53 
(a)  Tq  = 45  ksi 
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FIG.  1H. i RELATIVE  EXPECTED  COST  EC  AND  PROBABILITY  OF  FAILURE  PF(r0,N> 

VS  NUMBER  OF  PROOF  TESTS,  N (Glass/Epoxy  */4  Laminates  b = 53  ksi): 
(c)  fg  = AO  ksi 
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APPENDIX  A.  STATISTICAL  DISTRIBUTION  OF  RESIDUAL  STRENGTH 
UNDER  PERIODIC  PROOF  TESTS  IN  SERVICE  AND  SURVIVAL 
PROBABILITY  (NO  DAMAGE  DUE  TO  PROOF  TESTS) 


The  distribution  function  of  the  ultimate  strength  R(O)  after 
the  initial  (first)  proof  test  prior  to  service  is  given  by  Eq.  2. 
During  service  the  strength  is  subjected  to  degradation  following 
Eq.  4.  The  residual  strength  at  T flights  before  the  2nd  proof 
test,  denoted  by  R(T-),  is  related  to  R(0)  through  Eq.  4, 


Rc  (T-)  = Rc ( 0 ) - $T 


(A.l) 


The  distribution  function  of  R(T-)  can  be  obtained  from  that 
of  R(0)  given  by  Eq.  2 through  the  transformation  of  Eq.  1-1 , 

Fr(t_)(x)  - P[R(T-)  < x]  - P[tRC(0)  - 3>T}1/c  < x] 

= P[R(0)  < (xC  + $T)1/C]  (A. 2) 


After  the  second  proof  test  performed  at  T flight,  the  distri- 
bution function,  fd/t)(x)»  of  the  residual  strength,  R(T),  for  sur- 
viving components  can'be  obtained  from  as  follows; 

FR(T)00  = PCR(T)  ix]  = 1 - P[R(T)  > x] 


= 1 - P [R (T- ) > x | R(T- ) > rQ]  (A. 3) 

- 1 - -P-lRlT->  ; x > rn 

P[R(T-)  > rQ]  " 0 
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Substitution  of  Eq.  1-2  into  Eq.  1-3  yields 


FR(T) (x)  " 1 " 


; x > rQ 


(A.4) 


Under  the  second  proof  test  performed  at  T,  the  probability  of 
surviving  such  a proof  test,  denoted  by  B^,  is 


B1  = P[R(T- ) > rQ]  = exp 


C*)‘  - ft2 )' 


(A. 5) 


Let  R(2T-)  be  the  residual  strength  at  2T  before  the  3rd  proof 
test.  Then,  due  to  the  strength  degradation,  R(2T-)  is  related  to 
R(T)  through  Eq.  4, 


R (2T-)  = R (T)  - $T 


(A. 6) 


The  distribution  function  of  R ( 2T - ) can  be  obtained  from  that  of 
R(T),  given  by  Eq.  1-4,  through  the  transformation  of  Eq.  1-6 
(similar  to  the  transformation  given  in  Eq.  1-2)  as  follows, 


Fr(2T-) ^ ” exp 


a/C  a 

(H2)  -(t21) 


(A. 7) 


After  the  third  proof  test  is  performed  at  2T,  the  distribution 
function  Fy^yjU)  of  the  surviving  original  components  can  be  ob- 
tained similarly  to  the  transformation  of  Eq.  1-3, 


fr(2T)(x)  - 1 - p ;r[|t- } > r> 


(A.8) 
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Application  of  Eq.  1-7  into  Eq.  1-8  yields 


FR(2T)(x)  = 1 - exp 


rQ  + 2<J>T 


+ 2$T 


; x - r0 


7 (A. 9) 

2i  °f  survivin9  the  3rd  proof  test  performed  at 

iVas  ^ 9 COmPonent,  denoted  by  B2,  follows  from  Eq. 


{q  oi  / C ot/c 

p-L!!)  - p-liH)  J 

(A. 10) 

The  probability,  B^,  of  survival  up  to  2T  flights  for  the  oriai- 
nal  components,  i.e.,  the  probability  of  surviving  both  the  second 
proof  test  performed  at  T and  the  third  proof  test  performed  at  2T, 


B2  = B1  B2  = exP 


(?)  - ) 


(A. 11) 


in  which  Eqs.  1-5  and  I — 1 0 have  been  used. 

a s™ilar  manner » the  distribution  function  of  the  residual 
strength  nght  after  the  j+lth  proof  test  performed  at  jT,  for  the 
original  components? can  be  derived  as 


! . c . a/C  a 

W)w  ’ 1 - e*p  | (— ;/jT)  - 


’ x ir0 


(A. 12) 


and  the  probability  density  function,  fR(jT)(x),  of  R(jT)  is 
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I 


| r 


* 


I 


(a. 13) 

The  probability  of  surviving  all  the  previous  proof  tests  up  to 
jT  flights,  denoted  by  Bj,  can  be  shown  as 


(A.  14) 


t 
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appendix  b.  damaging  effect  due  to  proof  tests 


Two  possible  types  of  damage  to  composites  may  occur  due  to 
the  proof  test,  referred  to  as  the  static  strength  damage  and  the 
fatigue  strength  damage,  respectively,  as  discussed  in  the  following; 

(1)  The  static  strength  damage  refers  to  the  degradation  of  the 
residual  strength  immediately  after  proof  testing.  This  resembles 
the  case  where  a crack  exists  and  the  crack  size  increases  under 
one  cycle  of  large  proof  load  thus  resulting  in  the  degradation  of 
strength  immediately.  Let  R(t+)  be  the  residual  strength  right 
after  the  proof  test  performed  at  t and  R(t-)  be  the  residual 
strength  right  before  the  proof  test.  A simple  model  is  that 


R(t+)  = D, (r0/B)  R(t-)  (B.l) 


in  which  D,(rQ/6)  is  a function  of  rQ/&  that  is  the  ratio  of  the 
proof  load  ulevel,  rQ,  to  the  characteristic  strength,  6.  Neces- 
sary conditions  for  the  damaging  function  are  D|(rn/e)  = 1 for  rn 
< r*  and  Dtr0/e)  = 0 for  rQ  — *■  <=°,  where  r*  is  theu  threshold  u 
level  under  u which  no  damage  will  occur.  A simple  and  possible 
form  for  D^rp/e)  is 


D^Tq/b)  = A expj^-ai(r0/6)  2J  ; rQ  > r* 

(B.2) 


in  which  the  parameters  a,  and  a9  have  to  be  determined  from  test  a2 

results  and  A is  a constant  sucfrthat  =1  for  rQ=r*,  i.e.,  A=exp[ai (r*/e)  ]. 

(2)  The  fatigue  strength  damage  refers  to  faster  degradation  of 
residual  strength  after  the  component  being  proof  tested.  This 
resembles  the  case  where  there  is  no  crack  exists  before  the 
proof  test  and  the  crack  is  introduced  during  proof  testing,  e.g., 
the  first  ply  failure.  As  a result,  the  strength  degradation 
accelerates  under  the  subsequent  fatigue  loads.  A simple  form  of 
the  accelerated  strength  degradation  can  be  written  as 


Rc(t  + t)  = Rc(t+)  - 4>D2(rQ/6)  t 


(B.3) 
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which  differs  from  Eq.  4 by  a damaging  function  D2(rQ/B).  The  neces- 
sary conditions  for  D^ir^/s)  are  that  D^ir^/B)  = 1 for  rg  < r*  and 

D2(rQ/B)  = °°  for  rQ  — ► . 

A simple  form  for  D2(r0/6)  may  be 


D2(r0/6)  = A*  exp  a3(rQ/6) 


> ' n _ 1 


■,  rn  < r' 


(B.4) 


in  which 
results  , 


ich  the  parameters  a,  and  a,  have  to  be  determined  by  test 
ts  , and  A*  = exp[-a,(r*/6)  4 ] 


Accounting  for  the  damaging  effects  given  by  Eqs.  II-l  and 
1 1 -3 , the  probability  density  function,  fR(jj)(x)»  °f  the  residual 

strength,  R(jT),  of  the  original  components  right  after  the  j+lth 
proof  test  can  be  shown  as  follows  [see  Appendix  III] 


fR(jT)(x) 


% - 1 


a.  W -4- 

b \ej  D jc 


xc  + $D2T  Z D-J 


6CD1jC 


(B.5) 


c j_1  kc 

rnc  + $D?T  z D,kl 

u k=0  ' 

6CD1jc 


)-( 


X + 4>D0T  Z D 


bcd1jc 


kc  v 
- 


The  probability  of  surviving  up  to  the  j+lth  proof  test  per- 
formed at  jT  can  be  derived  as  [see  Appendix  III] 


B . = exp 
J 


r T ^ Vr 

rnC  + <t>DoT  z D, 
u c k=0 


(B.6) 


i 


APPENDIX  C.  STATISTICAL  DISTRIBUTION  OF  RESIDUAL  STRENGTH 
UNDER  PERIODIC  PROOF  TESTS  IN  SERVICE  AND  SURVIVAL 
PROBABILITY  (DAMAGE  DUE  TO  PROOF  TESTS) 


The  distribution  function  F„  (x)  of  the  ultimate  strength  R„ 
of  composites  is  given  by  Eq.  1.0  During  the  initial  (first) 
proof  testing,  not  only  the  tail  of  the  distribution  function 
Fr  (x)  is  truncated,  referred  to  as  the  truncation  effect,  but 
0 damage  also  occurs  according  to  Eqs.  1 1 - 1 and  1 1-3 , referred 
to  as  the  damaging  effect.  As  a result,  the  distribution  function 
for  the  composites,  that  survive  proof  testing,  is  subjected  to 
both  the  truncation  effect,  e.g.,  Eq.  1-3,  and  the  damaging  effect, 
Eq.  1 1 -1 . The  distribution  function  FR,Q,(x)  of  the  ultimate 
strength  R(0)  for  components  that  'u'survive  proof  testing 
without  the  damaging  effect  is  given  by  Eq.  2.  It  follows  frpm 
Eq.  1-2  that  the  strength  R(0)  after  the  initial  proof  test 
accounting  for  the  damaging  effect  is 


R(0+)  = 0^(0)  (C.l) 

in  which  D1  is  written  for  D1(rg/8)-  Hence, 


FR(0+)(x)  = p[R(°+)  1 x3  =P [D i R ( 0 ) i x] 

= P[R(0)  < *-] 

U1 


(C.2) 


= 1 - exp 


x lDlr0 


in  which  Fp(g+)(x)  is  the  distribution  function  of  strength  after 

the  initial  proof  test  where  the  static  strength  damaging  effect 
is  taken  into  account. 

Due  to  the  strength  degradation  under  service  load,  the  resid- 
ual strength  right  before  the  second  proof  performed  at  T flight, 
R(T-),  is  related  to  R(0+)  through 
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The  probability*of  surviving  the  proof  test  performed  at  T 
fl  ights,  denoted  by  B-j  is 


B-j  = P[R (T- ) > rQ]  = exp 


PHWI 


(C.8) 


The  degradation  effect  in  the  2nd  service  interval  is  (see 
Eq.  1 1-3) 


RC(2T-)  = RC(T+)  - 4>D2T 


(C.9) 


Hen-.e,  the  distribution  function,  Fn/o-r  \(x)>  °f  the  residual 
strength,  R(2T-),  right  before  the  3rd  ' proof  test  performed 
at  2T  can  be  obtained  from  Eq.  1 1 1 -7  through  the  transformation  of 
Eq.  II 1-9, 


FR(2T-)(x)  = p[R(2T-)  i x]  = p[R(T+)  ± (x°  + ^2T)'/C] 


+ $D0T  \a/C  /xc  + 4>D0T  + $D0TD 


(C.IO) 

cx/C\ 


= 1 - exp 


0 ' TL>2 
BCD1C 


) i 


' u 2 1 ' 2 ' u i 


. a/c\ 

■)) 


During  the  3rd  proof  test  performed  at  2T,  the  truncation  effect 
results  in  (see  Eq.  1-8), 


fR(2t)(x) 


p 

[R(2T- 

V 

X 
1 1 

p 

[R ( 2T- 

> r0J 

(C.ll) 


/ r r a/c 

r C a/C\ 

|/r0  + *D2T  + $D2TD1  \ 

/xc  + $D2T  + <t>D2TD^  \ I 

(l  »cof  1 

( ) i 

and  the  damaging  effect  R(2T+)  = D,R(2T)  leads  to 
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FR(2T+) ^ 


{R<2T>i5r] 


1 - exp  / 


■rcQ  + $D2T  + $D2TDiC 

6CD^C 


a/c 


\ 


) ~( 


xC  + $D2TD^  + 4»D2TD^C 


(G.12) 

The  probability  of  surviving  only  the  third  proof  test  performed 
at  2T,  denoted  by  B2,  is 


B = P[R(2T- ) > rQ]  = exp{ 


/r0  * «D2T\  /iy  » tD2T  + <02TC1-', 

' 6CD1C  ' \ 6CD2c  / 


a/C 


a/c 


(G.13) 

Therefore,  the  probability  of  surviving  both  the  second  and  the 
third  proof  test  for  the  original  component,  denoted  by  B*,  is 


★ ★ 

31  u2 


= B1  B9  = exp 


^ a 

a)  -( 


rQc  + $D2T  + $D2TD]c 

Icn2c 
3 D1 


a/c 


(C . 14) 


In  a similar  manner,  the  distribution  function,  FR,.T  ,(x),  of 
the  residual  strength,  R(jT+),  right  after  the  j+lth  KU  'proof 
test  performed  at  jT  can  be  derived  for  the  original  component  as 
follows; 


FR(jT+)(x) 


1 - exp  { 


c j ^ kc 

rnL  + fD-T  l D, 

u * k=0 


a/c 


) -( 


Xc  + $D  T 1 D, kc> 

,k=1 


a/c. 


(C.15) 


The  probability  of  surviving  all  proof  tests  (except  the  initial 
one)  up  to  jT  for  the  original  component  can  similarily  be  derived  as 
follows; 


(C.16) 


t 


It  can  easily  be  observed  that  Eqs.  1 1 1 - 1 5 and  1 1 1- 1 6 degenerate 
into  Eqs.  5 and  7 when  no  damage  is  inflicted  by  proof  tests,  in 
which  case  D-j  = 1 , = 1 . 


$ 


w. 


■■ 
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